gibs0ns

I have really enjoyed the experience of OpenZiti for this purpose. Being able to host dark services and impose granular access controls and routing for different clients is a game changer.

For the few services I host that require SSL (eg; WebUSB), I serve the dark service via a standard domain (example.com) so I can still get a LetsEncrypt cert, but public access to that domain resolves to a static page; "Plz connect to OpenZiti & try again". This allows me to have SSL on required dark services without requiring to install a private CA for each client.

I typically get stuck on the marketing stage.

Far too often I build a project, only to get ready to deploy it, then struggle to think of a name/domain for it.

Then coupled with the thought of struggling to market the project, I end up fizzling out at that stage.

If I already have users of the project, then I'll deploy it as a subdomain and forget about it until a user complains.

That was my exact thought. I've seen this a lot on IoT devices, to detect IP collisions/changes.

I've used Rongta thermal printers a fair bit, I've found them to be cost effective and easy to use. I mostly use them via WebUSB and some random JS ESC/POS lib. Though I have never bought directly from Rongta.

Stop being weird.

What would you want them to do if the tables were reversed? Support him, don't take advantage.

I used "tl" and/or "tldr" for the first few prompts, then variations like "tldr with each letter on new line"

I self host a lot, including some business related infrastructure for my home office (some employees also work from here). However services designed to be accessed by a wider public audience (eg; websites, emails, Nextcloud) are hosted on a rented dedi.

As other comments have pointed out, kids suck up every minute of your life, and when the internet or Plex don't work I'll know about it real quick (DAAAAD!). The important question for me is; how fast can I rebuild all of this if all the drives were wiped?

Here is my home setup;

Hardware:

* OPNSense - old i5 desktop, 70GB hdd, 20GB RAM

* TrueNAS - AMD A10-5800K, 16TB hdd, 1TB ssd, 8GB RAM

* OpenNebula Frontend - Random Intel NUC, 128GB ssd, 4GB RAM

* OpenNebula KVM Node - Xeon ?, 4TB hdd, 64GB RAM

* OpenNebula KVM Node - Xeon Silver ?, 2TB ssd, 128GB RAM + GTX 1070Ti

* Unifi EdgeSwitch ES-48

* Unifi WAP's

Software:

* OPNSense for routing

* OpenNebula for VM's

* Nomad for docker containers

* NetMaker for Wireguard based VPN

Main Apps:

* Home Assistant VM

* Plex (+rtorrent+sonarr+radarr+jackett+ombi) containers

* FusionPBX container for VoIP

* Kasm for remote desktops

* Rundeck container for various infrastructure based automation jobs

* Zabbix + Grafana containers for monitoring

* PacketFence VM for NAC

* Shinobi container for NVR

* Snapcast container for multi-room audio

I also have plenty of containers and VM's for various testing apps, or dev projects.

All of my non-critical containers (eg; Plex) self update daily at early morning hours.

For the critical stuff, I have tried to automate updates as much as possible.

The majority of things can be recreated from ansible, docker compose, or Nomad scripts, all of which are backed up to an offsite Nextcloud instance.

I use a lot of services on Opnsense, but I think one of the most important for me is the Traffic Shaper, allowing for bandwidth control.

I have about 14 VLAN's, and am in the process of setting up VXLAN's for further isolation.

I use restic for encrypted backups, stored in Wasabisys.com (no cost to download, unlike Backblaze).

I will admit there is still one design flaw that I'm yet to spend time overcoming; if everything is powered on at the same time, there is a chance some devices won't get an IP because OpnSense is not yet ready. My current flawless work-around is to boot Opnsense 30 seconds before everything else.

I am having this issue too. It seems it's making a POST request to localhost:8000, looks like their prod is broken.

How long until we start seeing HN headlines like; How I turned my home into a faraday cage to stop all those pesky IoT devices phoning home.

Surely there are people of all different nationalities that share that thought? Seems weird to make it only about Americans.

I can cope with it during the day by keeping my mind active along with background noises, it has really turned me into a workaholic.

I too used to listen to loud music when I was younger, I never noticed it cause issues for me at the time. The original cause was a hit on the head by a falling metal beam - nothing noise related - this caused the occasional distortion of sound but was a minor inconvenience really, it didn't affect my sleep or day-to-day life. After a few years of it like that, I found myself at a music festival which did make it worse. It turned into a high pitched alternating tone which is now there 100% of the time.

Imagine this, you're laying in bed at night, it's quiet outside just as it should be when sleeping, except for the constant ringing of your tinnitus.

You roll over, maybe you cover your ears or put a pillow over them, but the ringing sound doesn't change. In fact you realise nothing you do has any effect on the ringing sound - it's coming from within your head/ears, how do you block out a sound which is emanating from within?

You're tired, you just want to sleep, you have an early business meeting tomorrow, but throughout the perfect silence of the night, this ringing sound is relentless. You know you just need to ignore it and focus on something else, which might be easier if you weren't also trying to clear your mind so you could sleep. So you decide to get back up out of bed and take something, anything, that will knock you out.

Now that you're drugged up you get back into bed, laying there waiting for the drugs to put you to sleep, waiting while listening to that torturous sound, waiting while thinking about how easy it used to be to sleep, thinking about how you'll never know true peace and silence ever again. At some point you fall asleep, only to wake up in the morning feeling like shit from the drugs and lack of sleep.

I would give anything to be able to sleep in peace again.

I've generally considered an SSH tunnel as a poor man's VPN. If you're going to the effort to spinup a machine, and use SSH anyway, i find it much easier to use `ssh user@server.com -D 4444` then I can set my browser's proxy settings to use localhost:4444 as a SOCKS5 proxy. For those apps that don't have native proxy support, I use proxychains to force them over a proxy connection.

Ofcourse this is only useful for a single user, and for devices that can use ssh and proxies.

I was recently looking for an email forwarding service to use for a few months, initially I was searching Github for a decent OSS project that could do this for me, which is when I found your repo for Forward Email. The repo code was exactly what I was looking for, but after browsing your site and noticing how open and transparent it all was, I was instantly sold and bought the Enhanced package.

So ultimately, your open source code and business transparency[0] is what convinced me to pay instead of self-host.

Thank you for making it.

[0] https://forwardemail.net/en/open-startup

Having previously led a SoC2 implementation at a few large multi-nationals, the request coming from your company strikes me as either;

A) they're being super lazy and using Drata as a blanket to cover a bunch of SoC2 requirements

B) it has nothing to do with SoC2, it's just their excuse to push this employee spyware

Try asking for a company provided computer. I'd also put that company device on it's own VLAN.

For those out there using S3 to store their personal backups, I'd like to recommend Wasabi [0] as either a replacement or addition to AWS S3. Wasabi offers object storage in multiple regions, compatible with AWS S3 API and therefore is a drop-in replacement. The storage cost is $6 per TB p/m, with no bandwidth costs.

I'm not affiliated with them, just a happy customer enjoying massive cost savings.

[0] https://wasabi.com/

Super weird mental gymnastics you got going on there. Hope you find love, and you don't kill them because they cross you.

Either ethical or otherwise, what are some not-crap ad tech companies, that sell their services?

Also checkout secured.gg [0], I recently discovered them while researching DDoS solutions used by other popular game servers (for Minecraft, and GTA5). I haven't used them but their pricing seemed reasonable to me.

[0] https://secured.gg/dedicated

This essentially echos my experience anytime I have had to deal with Microsoft support. It's unfathomable how bad their support is and the difficulty to get anything done even when presenting clear evidence/facts.

For me, I don't define any variables via the cli, i put them all in the docker-compose.yml or accompanying .env file, that way it's a simple `docker-compose up` to deploy. Then I can track these files via git, and deploy to remote docker hosts using docker-machine, which effectively sets the DOCKER_HOST env var.

While I haven't used it personally, there is [0] Watchtower which aims to automate updating docker containers.

[0] https://github.com/containrrr/watchtower

Props for bird lives. It's amazing how many people don't realise cats kill for sport, and unlike a dog for example, can't be trained not to do so.

Excuse me if this doesn't make sense, I'm non-US and don't understand the ordeal with college. Based on this project and your comments here on HN, you seem more knowledgeable than the average college-goer. Is college really necessary for you? Could you not skip straight to university?

Unfortunate name. To say something is rocky, is like saying it's unstable/unreliable.

Shells come in all shapes and sizes, I hope they will be compatible.

I discovered Babylon last year iirc and was impressed by demos, docs, and support by Microsoft so I figured I wanted to build something worthwhile in it to try it out.

I decided to start developing a 3rd-person MMORPG using Babylon v4.0 as a side project, however after investing far too much time and getting it to a decent point, I came to question why I was bothering with a strictly web-based engine for a rather complex and extensive game. If I was going to go to the effort of creating this game, why not use some kind of game engine that can then export it to multiple platforms including web? So since then I've halted dev on the babylon version of the game, and begun porting to the Godot game engine, which can export to web among other platforms.

With all that said, I still enjoyed my experience using Babylon, it was just the wrong tool for my chosen project.

Babylon is a great choice for a lot of web based 3d content, but if you're intending to build any kind of significant game I'd recommend using a proper game engine from the start as it will enable you more flexibility in the long term.

If however you do require a character controller for Babylon, I used babylonjs-charactercontroller [1] for my project and found it dynamic enough to work for most situations.

[1] https://www.npmjs.com/package/babylonjs-charactercontroller

Node-red is indeed great, and useful even for novice users that can't code, while still being powerful for power users that want to write JS.

I run Home Assistant (on their Hassio OS) on a raspberry pi2, which includes integration for Tasmota, ESPHome, Node-red, MQTT server, influxdb, plex server, presence detection, and more, all through a polished web ui. I highly recommend it if you're looking to tie together a bunch of IoT devices. For me it has become my central location to manage all my "smart" home devices, and is essentially the glue that holds it all together while providing a pleasant UX for managing it all. With the integration of Node-red, it provides nodes that represent your Home Assistant based sensors/switches so you can easily read/write their values within your Node-red flow.

It might be worth looking at ESPHome (https://esphome.io/), it's very similar to Tasmota but modular and is configured via yaml files. It also supports OTA updates for firmware/config changes (after the initial flash). I feel ESPHome scales better than Tasmota for these reasons - no need to visit the individual web UI's for each Tasmota device, using ESPHome you can update your configs from a central web UI and then push the changes to your devices via wifi.

TLDR; Tasmota is great for bespoke devices, but IMO ESPHome is better because it's modular and supports OTA updates.

Do you know of, or can recommend, any studies on this "waking up the neural pathways" effect? I'm wondering what is happening here, surely it's more than simply firing those pathways as I'd imagine that to happen within seconds as opposed to the day or so it took him to recover. Thanks